Time and Expense Fraud – Expense Abuse – Gaming the Limits
ComplianceESG11 července, 2019|Aktualizovánoúnora 21, 2022

ISO 31000 blog series – Recording and reporting

ISO 31000 blog images

Having walked through the previous ISO 31000 steps, we now come to the “Recording and Reporting” step.

Recording is about recording information in a risk register, so that this information can then be reported to decision-makers.

In a sense this is what the bowtie does best – it records risks which can then be reported more effectively to stakeholders. But perhaps a more traditional risk register is required. In this blog we will look at the different ways in which BowTieXP supports recording your risk register and reporting that information.

Recording risk information with BowTieXP

For recording your risk register, BowTieXP has something called the Case Overview. You can find the Case Overview in the main menu: View →Windows → Case Overview.

The case file overview presents many views onto the data in the case file from different perspectives (“overview”), allowing visualization of relationships, which might otherwise be less evident. This also helps you to quickly find related data.

As you can see in the image below (figure 1), there are many lists available in the Case Overview, we will highlight just a couple in this blog.

ISO 31000 blog imagesFigure 1: Case overview options

The classic perspective lists all bowtie groups, hazards, threats and consequences present in the current file along with each consequence’s risk assessments. This overview is similar to a classic hazard register. This will, therefore, allow you to record your risk register. But perhaps a different focus is required; doing bowties is all about barrier focused risk management, so the barrier register might be of particular interest for you.

By clicking on the case overview columns, you can change the ordering for a better overview. In the example below (figure 2), the barriers in the Barrier Register overview, have been sorted on most times occurring.

ISO 31000 blog images
Figure 2: Barrier Register overview, sorted on most times occurring click here to view image.

Reporting with BowTieXP

And now, for the second step: reporting. You’ll note that on each page, there is an ‘Export to Excel button’ (figure 3). Simply left-click on this button and you will be presented with the same view, only now in Excel where you’ll be able to more easily import or export existing values to some of your pre-existing risk registers.

ISO 31000 blog images
Figure 3: Export your risk register to Excel, click here to view image.

Using these two key features, it will be easier to capture relevant information in a simple, clean overview that will allow you to more effectively communicate that information to decision-makers.

In the next blog of this series, we will explore in more depth how to communicate information, not only to decision-makers but also to the rest of the company.

Související názory

  • Kybernetické bezpečnostní incidenty: Jak jim předcházet chytře a efektivně
    Whitepaper / redakční obsah
    Compliance
    Právo
    září 27, 2022

    Kybernetické bezpečnostní incidenty: Jak jim předcházet chytře a efektivně

    Počty kybernetických útoků rostou. Po celém světě a ve všech sektorech a jejich dopady jsou stále závažnější a dražší.
    Další informace
Back To Top